Update your browser for FTB services August 2018 Tax News

In June of 2018, we took additional steps to further protect customer information. Due to an outdated security layer in some older browsers, we are preventing customers using these browsers from accessing any of our online services.

As a result, customers must upgrade their browser to access MyFTB or other online services.

Description of the vulnerability

Transport Layer Security (TLS) is an authentication and security protocol used in browsers and web servers. TLS 1.0 is outdated and subject to attack. We are moving to support only TLS 1.1 and 1.2 on our servers.

Problem

Some of our customers’ browsers are using TLS 1.0.

What’s happening?

Effective July 1, 2018, we decommissioned support for TLS 1.0 for online services (Check Your Refund, Web Pay, MyFTB, etc.) only. The rest of our website will continue to support TLS 1.0 (in order to provide messaging) until November 1, 2018.

Why?

TLS 1.0 is outdated and subject to attack. Many financial institutions are doing this.

TLS 1.0 allows attackers to silently decrypt data that's passing between a webserver and an end-user browser.

The National Institute of Standards and Technology (NIST) recommended we remove support of TLS 1.0 to protect a potential attack.

Customer Impact

Removing TLS 1.0 will affect some browsers currently in use.

What will customers experience?

Customers will get “Unable to load page” error.

What will customers need to do?

Upgrade their browser.